This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa
File:                     3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          loJqd3G/MODOFR3/tfP5odCacMKuW9gaAkd3VDEwPUk=
Subject key identifier:   62:A3:84:AE:F6:63:8B:54:67:68:F6:55:5D:0A:92:D9:E6:B7:68:55
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       4715AC9EE709103E2A7613B7948D1603FDF6A685
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:26:52 +0000
ROA not before:           Tue 06 Jan 2026 19:21:52 +0000
ROA not after:            Tue 05 Jan 2027 19:26:52 +0000
asID:                     264668
IP address blocks:        170.244.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:15:ac:9e:e7:09:10:3e:2a:76:13:b7:94:8d:16:03:fd:f6:a6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Jan  6 19:21:52 2026 GMT
            Not After : Jan  5 19:26:52 2027 GMT
        Subject: CN=62A384AEF6638B546768F6555D0A92D9E6B76855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:0b:0b:61:fb:4d:f7:3b:b2:a1:f1:58:ff:
                    b5:4c:51:cc:1f:c6:3a:2c:6c:4e:1d:f4:d1:44:44:
                    dc:0f:f2:f1:42:bb:3c:7e:a5:1e:79:80:ba:9c:a8:
                    77:e0:f4:21:47:cb:da:76:23:3f:d0:d5:44:0f:b1:
                    d4:96:8c:00:30:67:a4:7d:85:28:84:f7:14:d3:58:
                    8f:96:c6:ef:38:d9:39:60:c9:a7:11:2e:e4:af:a3:
                    f4:20:4b:76:31:86:d7:1c:af:3e:e8:f5:71:b3:f8:
                    24:a1:c6:56:d7:33:fe:96:e0:29:2a:25:88:8c:5b:
                    72:bd:79:48:49:4e:2b:3c:38:a2:8f:63:78:8b:c5:
                    e5:e8:85:54:52:d8:9d:eb:a3:af:7e:c5:3e:85:7a:
                    ce:94:ff:2f:d7:cf:25:af:1a:22:31:6d:37:e3:ea:
                    e8:95:51:00:f4:1e:57:fa:04:f8:9f:a8:5c:d6:17:
                    0c:7b:da:07:31:cf:2e:4f:7a:e4:97:1c:63:0d:7a:
                    8c:71:b0:4f:46:7d:6b:a8:a5:12:cd:36:2e:b5:ad:
                    86:73:db:c8:a1:00:d6:45:25:96:51:c9:41:b2:ec:
                    bd:19:a6:4f:aa:75:ff:ec:6f:f6:4d:87:65:d6:19:
                    d0:dc:33:20:d2:c6:39:7d:6d:b2:af:40:31:47:c7:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:84:AE:F6:63:8B:54:67:68:F6:55:5D:0A:92:D9:E6:B7:68:55
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:e4:55:88:9a:a2:1d:4e:05:77:20:0f:0b:9c:1c:f3:99:
         ec:fe:24:39:82:3b:1b:94:0c:09:92:1d:2b:f5:cb:fb:af:cf:
         5b:99:97:6e:9d:91:b3:cc:95:3c:d1:9a:fa:54:3e:b0:83:a0:
         0f:7a:bf:45:22:5e:51:28:e3:cd:ec:d3:1c:f5:d8:39:5e:a9:
         98:12:07:d7:f9:fc:f9:8b:89:0d:b7:a6:ea:5b:04:09:12:67:
         9a:2f:19:4a:26:f7:97:51:8e:3b:db:27:c4:41:f5:98:9e:67:
         85:03:a9:0d:f6:fe:b1:c0:33:bd:21:c6:0d:99:2e:b5:a1:bf:
         ab:56:14:04:66:2e:75:2f:f3:36:d0:8b:e0:26:5b:98:2a:fb:
         84:06:8c:aa:c1:50:f0:42:68:d5:0d:51:b5:73:57:a9:00:69:
         e4:79:d0:82:cd:64:d9:c7:25:01:45:73:ff:81:62:f6:55:c9:
         9b:f0:31:3f:99:40:cd:80:45:34:c1:88:fe:98:fa:6d:3b:c6:
         2b:f8:75:1b:46:7b:22:0a:32:e7:a4:8a:90:50:19:a1:27:57:
         72:a5:92:44:bf:f4:4a:44:55:51:13:d7:3a:1c:e6:9d:a7:12:
         1d:4e:2e:29:da:ca:00:38:58:7b:5e:ea:cb:b2:ec:32:d0:03:
         34:e9:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:36:54 2026 by rpki-client